Binance Warns iOS vulnerability 'Worse_Query' lets apps read other apps' files
Binance says the flaw could expose seed phrases, private keys and login credentials and Urges users to delete sideloaded apps and update iOS.
Key takeaways
- 1Vulnerability named "Worse_Query" could expose seed phrases, private keys and login credentials
- 2Binance advises deleting sideloaded iOS apps and installing the latest iOS update
Binance warned on Thursday that an iOS vulnerability called "Worse_Query" could let malicious apps read files from other apps on the same device.
The flaw allows a rogue app to access data stored by unrelated apps, potentially exposing seed phrases, private keys and login credentials. Binance said the issue affects iOS devices that run sideloaded applications. The exchange urged users to delete any sideloaded apps and to install the latest iOS update, which includes a fix for the vulnerability.
Binance is the world’s largest cryptocurrency exchange, offering spot, futures and staking services to millions of retail and institutional users. Its platform is a primary gateway for buying, selling and storing digital assets, making security of the devices used to access the service critical for its customers.
The advisory points to the broader risk of sideloaded iOS apps for crypto holders, who often store private keys on mobile wallets. Users should ensure their devices run the newest iOS version and avoid installing unverified software. Binance may release further guidance, while Apple is expected to monitor the issue; traders will watch for confirmation that the patch resolves the exploit.
Reported and edited by the YourKhabri desk under our editorial policy. Nothing here is investment advice.